CVE-2024-48145

CVSS 9.1 CRITICALEPSS 0.5%CWE-77

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

24 Oct 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

n/a · n/a

References

https://apps.microsoft.com/detail/9n3zxd05895t?hl=en-us&gl=US https://github.com/soursec/CVEs/tree/main/CVE-2024-48145